Static task
static1
Behavioral task
behavioral1
Sample
e691c1d4d2673147b19848b9666ea5dd75a7402b44090b34ab225100477817c5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e691c1d4d2673147b19848b9666ea5dd75a7402b44090b34ab225100477817c5.exe
Resource
win10v2004-20220812-en
General
-
Target
e691c1d4d2673147b19848b9666ea5dd75a7402b44090b34ab225100477817c5
-
Size
319KB
-
MD5
81d0bd25a58c085c2834cd87418869f2
-
SHA1
3b6b8e633cb049913159aebeb46cd4d52cd9c41b
-
SHA256
e691c1d4d2673147b19848b9666ea5dd75a7402b44090b34ab225100477817c5
-
SHA512
c12c3a864cba692edee0faf975197887e1ebf03d8187490449d58001c782ac025db03ba001570fb053f60b5be7a54a41b827170097dc3b1d5b103c9b94866c9d
-
SSDEEP
6144:vl36+FCLmEpXSVFl9Zb8ghpOz/b0NEjXLHkpuHK:vJ6+RjljQkpiD0NEfx
Malware Config
Signatures
Files
-
e691c1d4d2673147b19848b9666ea5dd75a7402b44090b34ab225100477817c5.exe windows x86
009f80a66705b3631b0e415c44f36ae7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_SetFlags
MakeDragList
ImageList_SetImageCount
ImageList_Destroy
CreateStatusWindow
ImageList_DragMove
ImageList_Create
ImageList_DragLeave
CreateMappedBitmap
ImageList_Draw
ImageList_LoadImageW
InitCommonControlsEx
ImageList_GetImageRect
ImageList_SetBkColor
ImageList_GetImageInfo
CreateUpDownControl
ImageList_GetBkColor
CreateToolbarEx
ImageList_AddIcon
CreatePropertySheetPage
ImageList_Remove
DrawStatusText
ImageList_Replace
ImageList_GetIconSize
_TrackMouseEvent
shell32
DragQueryFileAorW
RealShellExecuteA
SHGetFileInfoA
CommandLineToArgvW
comdlg32
GetOpenFileNameW
ChooseFontA
user32
FillRect
OffsetRect
DdeUnaccessData
SetMenuItemInfoA
GetDesktopWindow
InsertMenuW
CreateWindowExA
DefWindowProcW
IsWindowEnabled
CheckDlgButton
OemToCharBuffW
MessageBoxIndirectW
CallMsgFilter
MessageBoxA
RegisterClassA
EnumPropsW
RegisterClassExA
SetCapture
DestroyWindow
SendDlgItemMessageW
FlashWindowEx
GetOpenClipboardWindow
ShowWindow
PeekMessageW
wininet
InternetReadFileExA
InternetSetOptionExA
InternetGetCookieA
InternetTimeToSystemTimeW
InternetAutodialHangup
FtpOpenFileW
InternetDialA
kernel32
CloseHandle
TlsFree
InitializeCriticalSection
GetAtomNameA
SetFilePointer
GetConsoleMode
FreeEnvironmentStringsW
GetVersionExA
LCMapStringA
GetStringTypeW
FreeLibrary
EnumSystemLocalesA
ExitProcess
GetLastError
GetProcAddress
GetTimeZoneInformation
GetModuleHandleA
FreeResource
GetSystemTimeAsFileTime
GetTimeFormatA
TerminateProcess
SetUnhandledExceptionFilter
GlobalUnfix
WriteConsoleA
TlsGetValue
GetCurrentThread
GetStartupInfoA
FreeEnvironmentStringsA
InterlockedDecrement
GetCurrentProcess
HeapSize
SetEnvironmentVariableA
TlsAlloc
WriteFile
GetConsoleCP
GetStringTypeA
GetLocaleInfoW
GetCommandLineW
VirtualFree
GetEnvironmentStringsW
SetLastError
HeapDestroy
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
CreateMutexA
GetConsoleCursorInfo
UnhandledExceptionFilter
CreateFileA
SetStdHandle
GetModuleFileNameW
SetHandleCount
GetUserDefaultLCID
RtlUnwind
InterlockedExchange
GlobalReAlloc
OpenProcess
FileTimeToSystemTime
GetCurrentThreadId
GetACP
OpenMutexA
GetTickCount
HeapCreate
ReadFile
GetStdHandle
GetCPInfo
GetLocaleInfoA
LCMapStringW
GetEnvironmentStrings
HeapReAlloc
CompareStringA
WriteConsoleW
LeaveCriticalSection
GetTempFileNameW
GetModuleFileNameA
GetStartupInfoW
GetProcessHeap
HeapFree
IsValidCodePage
CompareStringW
Sleep
IsDebuggerPresent
MultiByteToWideChar
FlushFileBuffers
VirtualAlloc
InterlockedIncrement
lstrcmpW
IsValidLocale
VirtualQuery
GetCurrentProcessId
GlobalFree
GetDateFormatA
GetCommandLineA
TlsSetValue
LocalFileTimeToFileTime
GetOEMCP
LoadLibraryA
SetConsoleCtrlHandler
WritePrivateProfileStringW
HeapAlloc
GetConsoleOutputCP
GetFileType
QueryPerformanceCounter
lstrcat
WideCharToMultiByte
DeleteCriticalSection
Sections
.text Size: 131KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ